General
-
Target
Downloader.exe
-
Size
5KB
-
Sample
241117-cf36nayeqm
-
MD5
706e22002777e3b0725eed259a326e49
-
SHA1
e21d09552b53944f31854575aeb79337c710bb6c
-
SHA256
beb906fef72f82d546983f42b2ac7a560739e07faa6d9b18f3ffdd6cf8876e2d
-
SHA512
6574b1cb59131eed469956c70e301580b5e058dffc8004c1e3c00f8c5f98d90929d064680be23440003bcaec64cccb822f372388c3c69319534f5bbfad172630
-
SSDEEP
48:67aXkBozwWBvslhIBo7Jf6NMM18He8lRThVZ6JqtMcp0b54tMgClXUgf3FCpfbNM:BVzwGwH7pRThVZKmMi0GClUqyzNt
Static task
static1
Behavioral task
behavioral1
Sample
Downloader.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
Downloader.exe
-
Size
5KB
-
MD5
706e22002777e3b0725eed259a326e49
-
SHA1
e21d09552b53944f31854575aeb79337c710bb6c
-
SHA256
beb906fef72f82d546983f42b2ac7a560739e07faa6d9b18f3ffdd6cf8876e2d
-
SHA512
6574b1cb59131eed469956c70e301580b5e058dffc8004c1e3c00f8c5f98d90929d064680be23440003bcaec64cccb822f372388c3c69319534f5bbfad172630
-
SSDEEP
48:67aXkBozwWBvslhIBo7Jf6NMM18He8lRThVZ6JqtMcp0b54tMgClXUgf3FCpfbNM:BVzwGwH7pRThVZKmMi0GClUqyzNt
-
Download via BitsAdmin
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-